Privacy Policy

1. Who we are, and our role

LeadYard is a lead-generation service operated by KRROP in Ontario, Canada. Homeowners tell us about a project they want quoted; we pass that request to local trades contractors who pay to receive it.

We are the organisation responsible for your information when you submit a quote request or create a contractor account. We are not acting on someone else's behalf. Once a contractor receives your request, that contractor becomes responsible for it in their own right — their handling of your details is governed by their own practices, not this policy.

Privacy laws that apply to us. LeadYard is subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) where applicable, as well as applicable provincial private-sector privacy laws. Commercial electronic communications are also subject to Canada's Anti-Spam Legislation (CASL).

2. What we collect

If you submit a quote request (homeowners)

• Contact details — your name, email address and phone number.
• About the project — the trade category, your postal code, your timeline, and the description you write.
• Photos, if you choose to add them. They are optional and a request works fine without them.
• How many quotes you asked for (between one and five).
• Your consent record — which contact methods you agreed to, which you preferred, the exact time, and the version of the wording that was on screen.
• Technical details captured automatically — your IP address, your browser's user-agent string, and the referral or campaign tags in the link you arrived through.

If you create a contractor account

• Your business name, contact name, email address and phone number.
• The trades you work in and the areas you serve.
• Login and session records, and a record of which leads you have unlocked.
• Payment is handled by Stripe. We never see or store your full card number — it goes directly to Stripe.

If you only visit the site

Our pages load Umami, a page-view counter we run ourselves, on the same Canadian servers as the rest of LeadYard. It records page views, referrers and approximate region. It sets no cookies, does no cross-site tracking, and sends your visit to no other company — which is why turning it on added no new name to the list in section 7.

Until 22 September 2026 this page told you our pages carried no analytics at all. That was true when it was written. We have updated it rather than leave the old wording in place. Our hosting and network providers keep standard server logs, which include IP addresses. We do not use advertising cookies or cross-site tracking pixels.

3. Quote requests and contractor matching

When you submit a quote request, LeadYard may collect information such as your name, email address, telephone number, project location, project description, photographs, documents, communication preferences and other information you choose to provide.

We use this information to process and verify your request, understand your project, match you with appropriate contractors, facilitate quotations and communications, provide customer support, prevent misuse or fraud, and operate and improve the LeadYard service.

Sharing with matched contractors. To provide the quote-matching service, LeadYard may disclose information from your request, including your contact information, project information, photographs and communication preferences, to the contractor or contractors matched with your project. These contractors may use the information to evaluate your project, prepare or discuss a quotation, ask relevant questions, arrange appointments and otherwise respond to your request.

Where practical, LeadYard will identify the contractors matched with your request. Contractors participating in the LeadYard network are independent businesses and may have their own privacy practices.

Email, text and telephone communications. Where you provide the applicable consent, LeadYard and contractors matched with your quote request may contact you by email, SMS/text message or telephone regarding that request. Communications may include questions about your project, requests for additional information or photographs, quotations, appointment scheduling and reasonable follow-up concerning the project.

You may withdraw your consent to electronic communications at any time by using the unsubscribe mechanism provided in an email, replying STOP to an applicable text message, using our communication-preferences mechanism, or contacting LeadYard at trust@leadyard.ca. Withdrawal of consent will apply going forward.

Consent relating to a quote request does not constitute consent to receive unrelated advertising or promotional communications from LeadYard or participating contractors. Where consent is required for other marketing communications, it will be requested separately.

4. Why we collect it

• To deliver the service you asked for — matching your request to contractors who work in your trade and area, and passing them your details so they can quote.
• To confirm the request is real. We email you a confirmation link, and your request is not shown to any contractor until you click it.
• To take payment from contractors and keep a record of it.
• To keep the service safe — rate limiting, spam and abuse prevention. This is what your IP address and user-agent are for.
• To understand how the site is used, in aggregate.

Contractors pay LeadYard for access to quote requests as part of the service described above. We do not sell or disclose your personal information to advertisers, data brokers, marketing lists or other parties for unrelated marketing purposes, and we do not use it to build a profile of you for any purpose other than the one above.

5. Consent, and how to withdraw it

When you submit a quote request, you choose which communication methods LeadYard and the contractors who receive your request may use to contact you about that request. You also choose the maximum number of contractors who may receive it, from one to five.

Email and text-message permissions are never pre-selected. We store the choices you make, the exact consent wording shown to you, the date and time, and information reasonably necessary to demonstrate how consent was obtained.

You may withdraw consent to electronic communications at any time by using the unsubscribe mechanism provided, replying STOP where available for text messages, or emailing trust@leadyard.ca.

Consent obtained for matched contractors. When you give LeadYard permission for matched contractors to contact you electronically, the identity of those contractors may not yet be known because matching occurs after your request is submitted. LeadYard may authorize contractors who receive your request to use that consent solely in connection with your quote request. Electronic messages sent using that consent must identify the contractor and LeadYard and provide a way to withdraw the applicable consent.

Withdrawing consent will not undo a request that has already been sent to a contractor — we will tell you who received it, and your withdrawal is passed on to them.

6. Who we disclose it to

There are exactly three ways your information leaves us.

1. To contractors who buy your request. This is the service. Before a contractor pays, they see the trade, the general area, your timeline and your project description — not your name, email, phone number or exact location. Once they pay, they receive your full contact details. You choose how many contractors can do this, from one to five. They are bound by our Contractor Terms, which limit them to your project, forbid resale or unrelated marketing, and require them to honour a withdrawal of consent.
2. To the service providers listed below, who process information on our instructions in order to run the site, the database, our email and our payments.
3. Where the law requires it — a valid legal order, or to establish or defend a legal claim.

7. Our service providers — the full list

Most companies do not publish this. We think you should be able to see exactly whose systems your information passes through, so here is the complete list.

We keep this table current. If we add a provider that handles personal information, it is listed here.

8. Where your information is stored

Your information is stored and processed in Canada, with one exception, named below. The table above says which provider handles what, and where. The application and the database — which means your quote request itself, your name, your contact details and your project — are hosted in Québec. Our email and our mailboxes are in Canada. The photos and documents you attach are in Canada.

The exception is card payments. Contractors who buy a lead pay through Stripe, a company in the United States, and their card details go to Stripe directly. Information held by a US company is subject to the laws of the United States, and US authorities may be able to compel access to it under their own legal processes, including, in some circumstances, without notice. If you are a homeowner this does not involve you — you never pay us, and nothing you send us goes to Stripe.

One other US company appears in the table above. Cloudflare answers the DNS lookup that turns leadyard.ca into an address. That happens before any connection to this site is made, and neither your quote request nor anything else you send us passes through them.

This changed on 14 September 2026. Until then the application and the database were hosted in the United States, and this page said so — including that US authorities might be able to compel access to your quote request under their own legal processes, in some circumstances without notice to you. That is no longer where your information is. We have updated this page rather than leave the old wording in place.

We are telling you where your information is, not what that guarantees. Canada's privacy law (PIPEDA) and anti-spam law (CASL) apply to us wherever our servers happen to be, and a "Canadian business" badge has never changed anyone's obligations. What it changes is which country's authorities can reach your information through their own legal processes — and for everything except card payments, that is now Canada. This policy is updated when a provider actually changes, not when we plan for one to.

9. How long we keep it

Twelve months after you submit a request, we remove your personal information from it automatically. You do not have to ask, and we do not wait to be reminded.

Two things are worth being precise about, because they are not the same. If no contractor ever bought your request, the whole record is deleted. If a contractor did buy it, we erase your name, email address, phone number and project description from our copy, and cut your postal code back to its first three characters — the part that covers a whole neighbourhood rather than a household. We keep what remains — the trade, the city, the dates and the payment — because a record of a sale is something we are required to keep for tax and accounting purposes. What is left does not identify you.

Deleting our copy does not delete the contractor's. A contractor who bought your request has their own copy of your contact details, and what they may do with it is governed by our Contractor Terms and by their own obligations under Canadian privacy law. If you want a contractor to stop using your information, ask them directly — and tell us, and we will help.

You can also ask us to delete your record at any time before the twelve months are up (see section 11).

10. Photos

Photos are optional. If you add them:

• Location data is removed. Phone cameras embed the GPS coordinates of where a photo was taken — usually your home. Every image is re-encoded on upload, which strips that and all other embedded metadata before the photo is stored.
• Contractors who have not paid see only a small blurred version, which is a separate image generated at upload. The full-size photo is not reachable before payment.
• They are deleted after 90 days.

Please do not include photographs of people, documents or anything else you would not want a contractor to see.

11. How we protect it

• The site is served over HTTPS.
• Contractor sign-in uses single-use links that expire in 15 minutes; we do not ask contractors to invent a password.
• Photo storage is private. Images are served only through short-lived signed links, and no permanent URL to any photo is stored anywhere.
• Access to the database is limited to the people who operate the service.

No system is perfectly secure, and we would rather say so than imply otherwise.

12. Your rights, and how to use them

Under PIPEDA you can ask us to:

• Tell you what we hold about you, and who we disclosed it to.
• Correct anything that is wrong.
• Delete your information, where we are not required to keep it.
• Withdraw your consent to being contacted.

Email trust@leadyard.ca with the email address or phone number you used. We will normally respond within 30 days. Where applicable law permits additional time, we will tell you about the extension and the reason for it. There is no charge.

If you are not satisfied with how we handle your request, you can complain to the Office of the Privacy Commissioner of Canada.

13. If something goes wrong

If we experience a breach of our security safeguards, we will assess it in accordance with applicable privacy law.

Where a breach creates a real risk of significant harm to an individual, we will notify affected individuals and report the breach to the appropriate privacy regulator as required by law, as soon as feasible. We also maintain records of privacy breaches as required by law.

14. Changes to this policy

When we change this policy we update the effective date and version at the top. Consent wording is versioned separately and never edited in place, so the record of what you agreed to always resolves to the words that were actually on your screen.

15. Contact

Kirko Papajanis, Managing Director, KRROP
56A Mill St E, Unit #333
Acton, ON L7J 1H3
trust@leadyard.ca